Function verify_zero_sum 

pub fn verify_zero_sum(contributions: &[RefreshContribution]) -> bool

Verify that a set of refresh contributions preserves the aggregate secret: sum_i g_i(0) must be zero. If this check fails, the refresh round is malformed and the shares are compromised.